Skip to content

0factor 0.1.7

Choose a tag to compare

View all tags
@c4l3b c4l3b released this 21 Oct 13:17
· 2 commits to main since this release
v0.1.7
86d7fc4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's changed

  • Fix sign-in for browser-only OIDC clients such as oidc-client-js and Blazor WebAssembly. Discovery (/.well-known/openid-configuration), certs (/protocol/openid-connect/certs) and realm info (/realms/{realm}) now return Access-Control-Allow-Origin (the request origin) with Access-Control-Allow-Credentials: true, like Keycloak, instead of failing with "Network Error".
  • Answer CORS preflights on those three endpoints, matching Keycloak's allowed methods.
  • Pin MessagePack 2.5.303 in the hosting package to fix GHSA-qhrr-8q5h-9q3h, pulled in by Aspire.Hosting 13.4.6.

See PR #22 and the full changelog.

Install

dotnet add package ZeroFactor.Aspire.Hosting --version 0.1.7
docker pull c4l3b/0factor:0.1.7
Assets 2
Loading